Manually Adding a User With the Administrator Role to the vCenter VPX_ACCESS Table

May 30, 2013 in vHersey, VMware

I did a vCenter upgrade recently and neglected to check what users and groups were configured as vCenter Administrators. The environment was configured with the local vCenter Server Administrators group assigned the Administrator role, a few other domain users with Virtual Machine user access, and a single Domain User with Administrator access.

When upgrading vCenter Server it displays a warning that it is going to remove some users that the VMware SSO Server is not aware of and writes a text file containing the deleted users and groups called deleted_vc_users.txt into the system’s temp directory. Any local server users or groups that have vCenter permissions are deleted.

During the upgrade the pop up warned me, but I was sure that the Domain Admins group had been configured with the Administrator role (it was not – Domain Admins had been added to the local Administrators group -ugh!). The upgrade finished successfully but it had deleted the local Administrators group from the vCenter permissions. Oh no!!!

Again I had been warned, but thought for sure the Domain Admins group had the permissions. If the upgrade is going to delete all the users with the Administrator role it allows you add a group during the upgrade, since there was a single Domain User that did have the role I did not receive this prompt.

I could have tracked down or changed the password for the user that still had Administrator access but since I had some time and there was no production impact I decided to do some poking around.

***DISCLAIMER*** ***WARNING*** ***DANGER***
Make sure you have a good backup of your vCenter database and know how to get yourself out of a jam before messing around in it. You have been warned!

I came across a forum thread about exporting the original VPX_ACCESS table from the vCenter Database and then importing it over the new VPX_ACCESS table, this gave me the idea to just try and manually add the Domain Admins group to the VPX_ACCESS table.
Read the rest of this entry →

vExpert 2013

May 29, 2013 in vHersey, VMware

vmware-vexpert

The vExpert awards for 2013 were announced yesterday afternoon. This is my second year as a vExpert! I am excited to be a part of the vExpert community and it is humbling to be included along side of so many great VMware community contributors.

I want give a shout out to ProfessionalVMware.com for providing the outstanding vBrownBag Program. The vBrownBag provides a fantastic opportunity to contribute to the VMware community. My vExpert application included many links to the vBrownBags I have presented. Thanks for a great program and I look forward to presenting many more in the future.

A huge thanks to John Troyer and the VMware Community for having such a great program.

It is AWESOME to be part of such a fantastic community!

Looking forward to the future….

Updating to ESXi 5.1 Update 1 with the Offline Bundle

May 27, 2013 in vHersey, VMware

Update 1 for ESXi 5.1 has been out for a few weeks now and the release notes for vSphere ESXi 5.1 Update 1 can be found here. I had a few minutes of downtime so I decided to go ahead and update the ESXi host running my home lab. Not for any specific reason other than I had some time and wanted to get to the latest version.

I downloaded the offline bundle from My VMware.
esxi51u1-update_3

Using the Datastore Browser I uploaded the offline bundle to a datastore that is accessible by the host I am upgrading.
esxi51u1-update_4

To list out the image profiles that are contained in the offline bundle using esxcli.

esxcli software sources profile list -d /vmfs/volumes/datastore1/update-from-esxi5.1-5.1_update01.zip

esxi51u1-update_1

Now apply the image profile update ESXi-5.1.0-20130402001-standard from the offline bundle with esxcli.

esxcli software profile update -d /vmfs/volumes/datastore1/update-from-esxi5.1-5.1_update01.zip -p ESXi-5.1.0-20130402001-standard

Once the update completes a host reboot is required.

After I rebooted the host the build number changed to 1065491 which corresponds to ESXi 5.1 Update 1.
esxi51u1-update_2

Now to update VMware Tools on all my lab VMs. Not a big deal though since the tools update does not require a reboot! Nice!

Here is a great post on performing the update by downloading the bundle from the VMware update repository directly to the host – http://vninja.net/vmware-2/quick-dirty-esxi-5-1u1-upgrade/ – great write up.

Good to know the update can be applied a number of different ways; using VUM if your host is managed by vCenter, using the offline bundle, or by connecting directly to update repository from the host.

Copy files between ESXi hosts using scp

May 10, 2013 in vHersey, VMware

I have been asked how to do this twice in so many days. So here is a quick post on how to copy files between the local datastores on standalone ESXi hosts without access to shared storage. There are a number of ways to accomplish this, one way is using scp at the ESXi command line.

SSH access has to be enabled on the host you are copying to (and on the host you are copying from if you are accessing it via SSH).

scp path_to_file_to_copy root@FQDN_or_remote_host_ip:path_to_new_file_location

scp-capture

For example if you have an ISO named Win.iso on the local datastore1 of ESXi-1 (192.168.1.25) and you want to copy it to the local datastore1 of ESXi-2 (192.168.1.201):

scp /vmfs/volumes/datastore1/Win.iso root@192.168.1.201:/vmfs/volumes/datastore1/Win.iso

You will be prompted for the root password of the remote host and once you have successfully authenticated the file will copy.

I know this works on ESXi 5.x hosts, not sure about earlier versions. Again make sure SSH is enabled on the remote host.

Happy Friday!!!

vCenter Server Database Upgrade Hangs

April 22, 2013 in vHersey, VMware

Recently I was given a project to upgrade a 4.0 ESX environment to 5.1 (actually I have had a couple few of these upgrades recently). For this project the physical vCenter Server would also be migrated to a vCenter Server virtual machine. The upgrade/migration process is fairly straight forward. A new Virtual Machine that would host the vCenter Server components (SSO, Inventory Service, vCenter Server, VUM) was provisioned and Microsoft SQL Server 2008 Standard was installed. The SSO databases were created. Then the SSO and Inventory Services were then installed without issue.

I created a backup of the original vCenter database and for the size of the environment the database was ginormous, a little over 15GB. I thought that was odd but for whatever reason I did not really dig into it much (until this would cause the upgrade to fail – keep reading). The database was detached from the original physical vCenter Server, the db and log files were copied to the new vCenter virtual machine, and the database was then attached to the the new SQL server. The vCenter ODBC connection to the new database was created and tested, all looked fine.

Read the rest of this entry →

Citrix XenServer, meh. Console Access, neat!

April 7, 2013 in Citrix, vHersey, VMware

Recently I have performed some discovery and analysis on a couple of production Citrix XenServer environments. Both of them hosting Citrix XenDesktop and both of them have been running beside a VMware vSphere environment. Not sure exactly why the design decision was made to introduce a separate hypervisor to an environment when XenDesktop is fully supported on VMware but what is done is done.

One of these environments is going through a network redesign and I am helping out with that. The network changes are going to require that some changes be made to the network configurations on the XenServers and this is what I was asked to help out with. I have had minimal exposure to XenServer and it was back a few years ago so I needed a quick refresh. I spun up XenServer in the lab for some quick testing.

XenCenter-ScreenShot

Good news is the changes that need to be made are fairly simple and things should go without issue. Bad news is all VMs without XenServer Tools installed (a majority of them) will have to be powered down before the network connection can be changed. What!!! Powered down to disconnect a VM from one network and reconnect it to a different one, yep. Crap!

One feature of XenCenter that I do find extremely neat (and useful) is the host Console access through XenCenter. Just select the host and then the Console Tab and you are presented with a command line console for the select XenServer host.

XenCenter-CLIConsole

To start up the console GUI (similar to DCUI on ESXi) run xsconsole from the command line.

XenCenter-GUIConsole

XenServer was easy to install and XenCenter management is fairly intuitive. The host console access is a neat feature but overall I am not impressed (now I know why I stopped messing with this way back when). I am going to keep poking around in it just so I can be familiar with the ins and outs but as I tweeted yesterday – “XenServer installed in the home lab. So I tried it and it is OK, now give me back my vSphere.”

BTW my lab XenServer environment is running on ESXi. To do this you prepare and configure the VM just as you would to run nested ESXi (VM HW version 9, vhv.enabled = “TRUE”, and Guest OS: VMware ESXi 5.x).

XenonESXi

I <3 vSphere!

vSphere Storage Appliance cleanup.bat

April 1, 2013 in Storage, vHersey, VMware

I have been doing some home lab work with the vSphere Storage Appliance (VSA). I have had a few request recently from customers with very small environments looking to leverage virtualization and a couple of large environments looking for solutions for branch offices.

I have been doing a lot of testing which included destroying and rebuilding the environment (multiple times). I just want to be familiar with how failures are handled and more importantly to recover from a failure. This is pretty well covered in the vSphere Storage Appliance Installation and Configuration Documentation.

One thing that was helpful in the lab environment was the section on “Deleting a VSA Cluster

There is a script called cleanup.bat on the VSA Manager Server, in the case of my lab this is installed on the vCenter Server, located in C:\Program Files\VMware\Infrastructure\tomcat\webapps\VSAManager\WEB-INF\test\tool\. To completely delete a VSA Cluster simply run this script passing your vCenter Administrator username, password, and Datacenter the VSA Cluster is configured on as parameters.

cleanup.bat vi-admin@lab.local MySuperSecretPassword LabDC

Not only does this delete the VSA Cluster, it also destroys all data in the VSA Cluster associated with the Datacenter LabDC – so be careful!!!

Just a note that I tried this several times without success. I found that the cleanup.bat script had to be run from an elevated (Run as Administrator) command prompt for it to work.

As the document says once the cleanup.bat completes you will need to restart the VMware Virtual Center Management Webservices.

I know the VSA is marketed for the SMB and I can see where that would be a good use case for it but I think for use in a branch office, where it is managed by a vCenter in an HQ, is really the where the VSA can shine.

Curious if anyone has deployed the VMware vSphere VSA in a production environment? Interested in hearing your thoughts or comments.

Toastmasters Meeting – Journey to VCDX

March 12, 2013 in vHersey, VMware

During VMware PEX I attended the VCDX Boot Camp in order to gain some insight into the VCDX certification process. One of the suggestions made by the Boot Camp panelists was to look up a local Toastmasters club and participate to help improve your ability to speak in front of others. So I did just that and last night I attended the first meeting.

There are several Toastmaster clubs in my area but I chose the ComUnity Speakers Toastmasters Club #5037 located in Chesapeake. This club meets on the 2nd and 4th Monday of each month at 7:00 PM and the meeting location is on my way home from work. I decided to check out this club specifically because of the activity posted on social media. The club seems to be very active with good participation from the members.

I enjoyed the meeting. The meeting follows an agenda that is very similar to the one on the ComUnity Getting Started page. The club President called the meeting to order and there were two prepared speeches by members. One was a member’s first Icebreaker speech and the other was a member’s speech project to demonstrate using props while speaking.

After the first two prepared speeches there were what are called “table topics” sessions. This is where you are given a topic and asked to speak “off the cuff” about it for one to two minutes. Everyone was invited to participate and I think everyone that was in attendance did. I even got up and talked about my cat for a minute and 18 seconds.

After the prepared speeches and table topics evaluations are given. The evaluator for each speech gives an oral assessment of the speech offering praise, tips, and suggestions. The “ah” counter and timer (everything is timed) also give their assessments. The general evaluator then gives an evaluation of the meeting overall. All evaluations were very constructive.

At the close of the meeting they asked guest to speak about how they found out about the club, what brought them to the meeting, and what they thought of the meeting. Neat process and a good group of folks. I can definitely see where this could be a benefit to anyone looking to become more comfortable with public speaking or just communicating in general.

Looking forward to the next meeting.

VMware PEX- Great Sessions, Good Times, Cool People

March 1, 2013 in vHersey, VMware

Had a great time in Las Vegas for VMware PEX 2013. I attended a lot of great sessions and meet some really cool people.

Had some really great sessions my last day at PEX. The Virtualizing Business Critical Applications for Maximum Performance session with @vmMarkA was excellent. Some really good performance best practices and a ton of great performance troubleshooting information. Specifically the information on the key metrics to monitor when trouble shooting performance issues. A lot of information packed into this one hour session and I have a few pages of notes on it. These will most certainly be summarized in another post in the very near future.

I also attended two other fantastic sessions on my final day, one on Exchange Virtualization Best Practices by @afontana_vmw and another which was a HA Deep Dive for SQL Server Virtualization by Scott Salyer of VMware. The Exchange session expanded a bit on the earlier performance session offering up some Exchange specific performance tuning options. The HA Deep Dive for SQL dove deep :) into the different HA options for SQL. Again, once I organize my notes there will probably be a separate post with a bit more detail on these session.

Finally got a chance to meet up with @nfritsch. Great guy! Had a great discussion with him about Citrix VDI and we chatted a bit about VMUG. Great to meet you Nick and look forward to chatting with you again soon.

The only thing I was disappointed with at PEX were the General Session Keynotes. Not sure what I was expecting but even with the stage setup and elaborate production these were anticlimactic (how awesome can a tech keynote be, don’t know but I was expecting more) and uninspiring. I can’t say that keynotes were very beneficial to me.

Where the keynotes were pretty blah, the guest speaker, Shawn Achor who gave a talk during the General Session on the second day was fantastic. Will probably end up buying his book, The Happiness Advantage: The Seven Principles of Positive Psychology That Fuel Success and Performance at Work, hope it is as interesting and entertaining as his presentation was.

I had a great time, learned a bunch of new stuff, and met a lot of really cool people. Look forward to the next one.

Nick-PEX
Nick @nfritsch

SixFootDad-PEX
Damian (@sixfootdad) doing some work on AutoLab in the Hang Space.

Me-Brocade-PEX
Hey look it’s me! (This picture won me an iPad in the Brocade/EMC twitter contest!!!)

Fingers crossed for @timantz and @kennega and everyone else that defended for VCDX at PEX. You guys are awesome and inspiring!

VMware PEX vExpert and VCDX Reception

February 27, 2013 in vHersey

Last night was the VMware PEX vExpert and VCDX Reception. It was held at this cool little Irish place in the Mandalay Bay shops the Rí Rá Irish Pub. Very neat place, have actually stopped in there for a drink a couple times on this trip. They carry Kaliber which is an NA beer from Guinness and probably one of the best NA beers out there.

The reception was fun and it was awesome to meet a few folks that I only know by twitter handle. Good to see @Bacon_Is_King, @sixfootdad, @networkingnerd, and @jasemccarty If you are not all ready you should follow these guys, great folks.

Also ran in to @timantz and @kennega at the party. Both of these guys did their VCDX defense earlier in the day. It was great chatting with them about the experience.

Here are a couple few (not so great) pics from the reception.
onphones
See it’s not just me. @Bacon_Is_King and @sixfootdad tweeting.

vExpertParty3
@Bacon_Is_King, @sixfootdad, and @networkingnerd

vExpertParty2
@kennega why so serious.

timvExpertParty
Hey it’s @timantz and that is @jasemccarty in the foreground.

me-vExpertParty
Hey look. It’s me!

Had a great time and it was great to be able to put a face to a twitter handle.